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DETAILED ACTION 
Claim Rejections - 35 USC §102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 35 1(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

2. Claims 1-2, 5-14, 17-26, 29-36 are rejected under 35 U.S.C. 102(e) as being anticipated 
by McManis(5,757,914). 

3. As per claims 1, 13, 25, McManis discloses a method of securely invoking an access 
control function(see col. 1, lines 65-67, col. 2, lines 1-11), receiving a digital signature for the 
access control function(see col. 2, lines 22-31); generating a mapping of the access control 
function to the digital signature; determining that the digital signature is mapped to the access 
control function based on the mapping when execution of the access control function is 
requested(see col. 2, lines 12-21); generating a plurality of records mapping access control 
events to access control functions; detecting that an access control event related to controlling 
access to information resources on a computer has occurred; determining that the access control 
event is mapped to the access control function; retrieving an executable element if the access 
control event is mapped to the access control function; generating a mapping between access 
control events and access control functions; detecting that an access control event has occurred; 
determining that the access control event is mapped to the access control function; ; generating a 
digital signature for a retrieved executable element(see col. 3, lines 8-25), determining whether 
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an executable element(i.e. program module B) matches the access control function by comparing 
the digital signature of the executable element and the digital signature for the access control 
function; and executing the retrieved executable element only when the retrieved executable 
element matches the access control function(see col. 2, lines 22-36, col. 3, lines 8-25, 65-67, col. 
4, lines 1-6). 

4. As per claim 2, wherein a particular class defines an implementation of the access control 
function; wherein the step of receiving a digital signature includes the step of receiving a digital 
signature for the particular class; and wherein the step of generating a mapping between the 
particular class and the digital signature, is inherent in McManis, because McManis discloses 
each application program object instance includes an object header, at least one digital signature, 
and a main application procedure, called a method(see col. 3, lines 8-25). The Examiner asserts 
that McManis discloses a class because McManis discloses a method. 

5. As per claims 7, 14, 26, 3 1 , the method includes generating a mapping of a plurality of 
access control functions to digital signatures, wherein the plurality of access control functions 
include the access control function, wherein one or more classes define an implementation for 
each of the plurality of access control functions; and wherein each of the one or more classes 
belong to a superclass, because McManis discloses each application program object instance 
includes an object header, at least one digital signature, and a main application procedure, called 
a method(see col. 3, lines 8-25). The Examiner asserts that McManis discloses a class, and a 
superclass, because McManis discloses a method. 

6. As per claims 8, 19, 32-33, McManis discloses this inherently because, further including 
the step of invoking a routine defined by a superclass that collects data to return to a caller of the 
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particular class, because McManis discloses each application program object instance includes 
an object header, at least one digital signature, and a main application procedure, called a 
method(see col. 3, lines 8-25). The Examiner asserts that McManis discloses a class, and a 
superclass, because McManis discloses a method. 

7. As per claims 9, 20-21, McManis discloses this is inherent, wherein the step of executing 
the executable element includes invoking a routine defined for the superclass, because McManis 
discloses each application program object instance includes an object header, at least one digital 
signature, and a main application procedure, called a method(see col. 3, lines 8-25). The 
Examiner asserts that McManis discloses a class, and a superclass, because McManis discloses a 
method. 

8. As per claims 10-12, 22-24, 34-36, McManis inherently discloses byte code, because 
McManis discloses an application program object instance includes an object header, at least one 
digital signature, and a main application procedure, called a method(see col. 3, lines 8-25). The 
Examiner asserts that since McManis discloses a method, and these methods are software. The 
Examiner asserts that bytecode is inherent, in McManis because the encoding of a computer 
programme. McManis method), is compiled. 

9. As per claims 5-6, 17-18, and 29-30, McManis inherently discloses name- value pairs. 
The Examiner asserts that with each method that is a corresponding name- value pair(see col. 3, 
lines 8-25). Thus, the methods such as method(128)(see col. 3, lines 17-25), are a part of the 
class. The Examiner asserts that these methods determine what the objects of the class do. 
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Response to Amendment 
10. The Applicant states that McManis does not teach or disclose a system that generates a 
plurality of records mapping access control events to access control functions and detecting that 
an access control event related to controlling access to information resources on a computer 
system has occurred. The Examiner disagrees with the Applicant. McManis discloses that a 
program module verifier responds to procedure calls by verifying the authenticity of a specified 
program module(see col. 2, lines 23-26). McManis discloses generating a message digest of at 
least a portion the specified program module in accordance with a message digest function, 
returning a verification confirmation when the decoded digital signature matches the message 
digest, and returning a verification denial when the decoded digital signature does not match the 
message digest, thus a comparison of the digital signature is done in McManis(see col. 2, lines 
23-36). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jenise E. Jackson whose telephone number is (571) 272-3791. 
The examiner can normally be reached on M-Th (6:00 a.m. - 3:30 p.m.) alternate Friday's. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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